13073 matches found
K000152186: Python Jinja2 vulnerability CVE-2025-27516
Security Advisory Description Jinja is an extensible templating engine. Prior to 3.1.6, an oversight in how the Jinja sandboxed environment interacts with the |attr filter allows an attacker that controls the content of a template to execute arbitrary Python code. To exploit the vulnerability, an...
MAL-2025-5281 Malicious code in json-webhooks (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 776d1361c31fc0cb7ceb907404e53747cde097dab00614dafac0820111281ad9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-5363 Malicious code in astro-island (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
CGA-V27H-RH4V-G3H6
Bulletin has no description...
CVE-2025-6674 CKEditor5 Youtube - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-081
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal CKEditor5 Youtube allows Cross-Site Scripting XSS.This issue affects CKEditor5 Youtube: from 0.0.0 before 1.0.3...
WordPress WP-Recall plugin <= 16.26.14 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin WP-Recall versions = 16.26.14...
WordPress Team Showcase plugin < 25.05.13 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by Tran Nguyen Bao KhanhVCI - VNPT in WordPress Plugin Team Showcase versions 25.05.13...
RHSA-2025:9623 Red Hat Security Advisory: osbuild-composer security update
Bulletin has no description...
MAL-2025-5327 Malicious code in justeat-storybook (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 577d8ffd11e5da3a5000b8a390c45c8474d2dd362e509a65a107f2b0df13e563 The OpenSSF Package Analysis project identified 'justeat-storybook' @ 1.0.3 npm as malicious. It is considered malicious because: - The package...
WordPress Pressroom - News Magazine WordPress Theme Theme <= 6.9 is vulnerable to Cross Site Scripting (XSS)
Software Pressroom - News Magazine WordPress Theme Type Theme Vulnerable versions = 6.9 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2025-32311 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 8441b464fd57 Credits Tran Nguyen...
MAL-2025-5250 Malicious code in nstmrt-stf-api-poc (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 29e69957371cd4fe181aa65e4f774a3c807e8ff11ebda5f2226dd881f89961ae The OpenSSF Package Analysis project identified 'nstmrt-stf-api-poc' ...
MAL-2025-5466 Malicious code in ted-ui (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in ted-ui (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-5393 Malicious code in dropdown_styles.css (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-5426 Malicious code in kendo.core.min (npm)
The package communicates with a domain associated with malicious activity...
RHSA-2025:9584 Red Hat Security Advisory: kernel security update
Bulletin has no description...
MAL-2025-5266 Malicious code in attributors (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dbefeaf34d3565832f706ae95a143747b2d0ff0a593532a3b8088020fd11bc1d The OpenSSF Package Analysis project identified 'attributors' @ 99.99...
BELL-CVE-2025-38083
Bulletin has no description...